Last updated 2 November 2026
Security measures
- Passwords are hashed by our authentication provider and never stored in plain text.
- Database access is controlled by row-level security, so each customer can reach only their own data.
- Profile pictures are stored privately and served only through short-lived links.
- Administrative access is role-based, and administrative actions are logged.
- Forms and sign-in are rate limited to slow down abuse.
Data breach response
If a personal data breach occurs, we will notify the Data Protection Board of India and the affected users as required by the DPDP Act and its rules.
Grievance Officer
You can raise privacy concerns with our Grievance Officer at the email address shown in the footer. We aim to acknowledge complaints within 48 hours.
Exercising your rights
Signed-in users can download or delete their data from Account → Privacy. Otherwise, contact us with the topic Privacy.
Questions about this policy? Contact us.